Block a user
wireguard-client (latest)
Published 2025-01-08 08:17:55 +01:00 by ich777
Installation
docker pull git.minenet.at/ich777/wireguard-client:latestsha256:415f57dd845935b6caffe6d249b4a1bf892438a2b4dac501413f6f96e25c68b0Image Layers
| # debian.sh --arch 'amd64' out/ 'bookworm' '@1733097600' |
| LABEL org.opencontainers.image.authors=admin@minenet.at |
| LABEL org.opencontainers.image.source=https://github.com/ich777/docker-debian-baseimage |
| RUN /bin/sh -c echo "deb http://deb.debian.org/debian bookworm contrib non-free non-free-firmware" >> /etc/apt/sources.list && apt-get update && apt-get -y upgrade && apt-get -y install --no-install-recommends wget locales procps && touch /etc/locale.gen && echo "en_US.UTF-8 UTF-8" >> /etc/locale.gen && locale-gen && apt-get -y install --reinstall ca-certificates && rm -rf /var/lib/apt/lists/* # buildkit |
| ENV LANG=en_US.UTF-8 |
| ENV LANGUAGE=en_US:en |
| ENV LC_ALL=en_US.UTF-8 |
| LABEL org.opencontainers.image.authors=admin@minenet.at |
| LABEL org.opencontainers.image.source=https://git.minenet.at/ich777/docker-wireguard-client |
| RUN /bin/sh -c apt-get update && apt-get -y install --no-install-recommends wireguard iproute2 iptables iputils-ping sudo socat && apt-get -y install resolvconf || true && rm -rf /var/lib/dpkg/info/resolvconf.* && sed -i '/net\.ipv4\.conf\.all\.src_valid_mark=1/s/^/# /' /usr/bin/wg-quick && sed -i '/secure_path=/a Defaults env_keep += "ALLOWED_CIDR"' /etc/sudoers && rm -rf initrd.img initrd.img.old vmlinuz vmlinuz.old /boot && rm -rf /var/lib/apt/lists/* # buildkit |
| RUN /bin/sh -c wget -O /tmp/gotty.tar.gz https://github.com/sorenisanerd/gotty/releases/download/v1.5.0/gotty_v1.5.0_linux_amd64.tar.gz && tar -C /usr/bin/ -xvf /tmp/gotty.tar.gz && rm -rf /tmp/gotty.tar.gz # buildkit |
| ENV DATA_DIR=/wireguard |
| ENV ALLOWED_CIDR=192.168.1.0/24 172.17.0.0/24 |
| ENV CONNECTED_CONTAINERS= |
| ENV UMASK=000 |
| ENV UID=99 |
| ENV GID=100 |
| ENV DATA_PERM=770 |
| ENV USER=wireguard |
| RUN /bin/sh -c mkdir $DATA_DIR && useradd -d $DATA_DIR -s /bin/bash $USER && chown -R $USER $DATA_DIR && ulimit -n 2048 # buildkit |
| ADD /scripts/ /opt/scripts/ # buildkit |
| COPY /wrapper/ /usr/local/bin/ # buildkit |
| RUN /bin/sh -c chmod -R 770 /opt/scripts/ && chmod +x /usr/local/bin/iptables-wg # buildkit |
| ENTRYPOINT ["/opt/scripts/start.sh"] |
Labels
| Key | Value |
|---|---|
| org.opencontainers.image.authors | admin@minenet.at |
| org.opencontainers.image.source | https://git.minenet.at/ich777/docker-wireguard-client |